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This listing of claims will replace all prior versions, and listings, of claims in the 
application: 
Listing of Claims: 

Claims 1-8 (Cancelled) 

9. (Currently Amended) An apparatus device for communicating with other devices 
to allow them to access applications, comprising : 
at least a first application; 

an authentication component configured to authenticate means for authentic a ting 
a communicating device; 

an access control component means accessible by a communicating device 
requesting access to the first application without the communicating device having been 
authenticated by the authentication componentm eans, and arranged to arbitrate whether 
access of the communicating device to the first application is granted or refused wherein 
if the arbitration requires an authentication of the communicating device, the access 
control component meaas configured to instructs the authentication component means to 
authenticate the communicating device, wherein the access control component ffteans is 
configured t o receives indications originating from the communicating device identifying 
the communicating device and the application requested. 

Claims 10-26 (Cancelled). 

27. (Currently Amended) A n apparatus d e vice for communicating with other devices 
to allow them to access applications, comprising: 

at least first and second applications; 

an authentication component configured to authenticatemean s for authenticating a 
communicating device; 

a_first access control componentm eaas accessible by a communicating device 
requesting access to the first application without the communicating device having been 
authenticated by the authentication componentm eaas, and arranged to arbitrate whether 
access of the communicating device to the first application is granted or refused wherein 
if the arbitration requires an authentication of the communicating device, the access 
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control component ffleafis configured to instructs the authentication component means to 
authenticate the communicating device; 

a_second access control component iHeans accessible by a communicating device 
requesting access to the second application without the communicating device having 
been authenticated by the authentication componentm aans, and arranged to arbitrate 
whether access of the communicating device to the second application is granted or 
refused wherein if the arbitration requires an authentication of the communicating device, 
the second access control component mea^s configured to instructs the authentication 
componentm eaas to authenticate the communicating device, wherein the first access 
control componentm eafis is accessible by a communicating device requesting access to 
the second application without the communicating device having been authenticated by 
the authentication component ffieafts, and is arranged to provide the access of the 
communicating device to the second access control component means. 

Claim 28 (Cancelled). 

29. (Currently Amended) A method of arbitrating the access of a requesting device to 
a service provided by a providing device c omprising : 

sending a request to access the a_service from the a_requesting device to the a 
providing device; 

receiving the request at the providing device and passing it, without authenticating 
the requesting device, to an arbitration component meaas interfacing the service; 

determining, in the arbitration componenti HeaBS, whether to grant or refuse access 
to the first application by the requesting device, wherein if the determination requires an 
authentication of the requesting device, the authentication is performed during that 
determination and not previously, wherein the determination is made on the basis of the 
identity of service requested and/or the identity of the requesting device. 

Claims 30-32 (Cancelled). 

33. (Currently Amended) The apparatus A d e v ic e as claimed in claim 9 wherein the 
access control component n^eaas is arranged to store security indications in association with 
accessible applications, wherein the stored security indication associated with the first 
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application is indicative of whether authentication of the communicating device is or is not 
required during arbitration. 

34. (Currently Amended) The apparatus A device as claimed in claim 33 wherein the 
stored security indication associated with the first application is indicative of whether 
authentication of the communicating device is or is not required during arbitration, in 
independence of the identity of the communicating device. 

35. (Currently Amended) The apparatus A device as claimed in claim 9 further 
comprising a user interface fef configured to authorizeiag access to an application during 
arbitration, the access control component meaas being arranged to store security indications in 
association with accessible applications, wherein the stored security indication associated with 
the first application is indicative of whether user authorization of the communicating device is or 
is not required during arbitration. 

36. (Currently Amended) The apparatus A devic e as claimed in claim 35 wherein the 
access control component» eans is further arranged to store trust indications in association with 
devices, and wherein the stored security indication associated with the first application is 
indicative of whether user authorization of the communicating device is or is not required during 
arbitration in dependence upon any stored trust indication associated with the communicating 
device. 

37. (Currently Amended) The apparatus A device as claimed in claim 9 wherein 
authentication comprises secret key exchange between the device and the communicating device. 

38. (Previously presented) A method as claimed in claim 29 comprising storing 
security indications in association with accessible applications, wherein the stored security 
indication associated with the first application is indicative of whether authentication of the 
requesting device is or is not required during arbitration. 

39. (Previously presented) A method as claimed in claim 38 wherein the stored 
security indication associated with the first application is indicative of whether authentication of 
the requesting device is or is not required during arbitration, in independence of the identity of 
the requesting device. 
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40. (Previously presented) A method as claimed in claim 29 further comprising 
authorizing access to an application during arbitration via a user interface, and storing security 
indications in association with accessible applications, wherein the stored security indication 
associated with the first application is indicative of whether user authorization of the 
communicating device is or is not required during arbitration. 

41. (Previously presented) A method as claimed in claim 40 comprising storing trust 
indications in association with devices, and wherein the stored security indication associated 
with the first application is indicative of whether user authorization of the requesting device is or 
is not required during arbitration in dependence upon any stored trust indication associated with 
the requesting device. 

42. (Previously presented) A method as claimed in claim 29 wherein authentication 
comprises secret key exchange between the providing device and the requesting device. 

43. (New) A method comprising: 

receiving a request to access an application and passing it, without authenticating 
the requesting device, to an arbitration component interfacing the service; and 

determining, in the arbitration component, whether to grant or refuse access to the 
application, wherein if the determination requires an authentication of the requesting 
device, the authentication is performed during that determination and not previously, 
wherein the determination is made on the basis of the identity of the application 
requested. 

44. (New) The method of claim 43 wherein the determination is made on the basis of 
the identity of the requesting device. 
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